CANOPY LEDGER

Draft, pending legal review

Acceptable Use Policy

Effective date: [EFFECTIVE DATE]

This Acceptable Use Policy ("AUP") describes what you may and may not do when using the Canopy Ledger platform and related websites (the "Service") provided by [COMPANY LEGAL NAME] ("Canopy Ledger," "we," "us," or "our"). It is part of our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms.

This AUP applies to every customer and every User. Customers are responsible for making sure their Users follow it.

1. Lawful, Licensed Use Only

You may use the Service only in connection with lawful business activities. You must not:

  • use the Service for any activity that is illegal under the applicable state or local laws where you operate, including cannabis activity that is not authorized by your state or local license;
  • use the Service in connection with any jurisdiction, location, or license type for which you do not hold a valid, current license or permit;
  • use the Service to record, plan, facilitate, or conceal diversion of cannabis to the illicit market, sales to persons below the legal age, unlicensed interstate transfers, or any other activity prohibited by your licensing authority;
  • knowingly enter false, misleading, or fabricated records (for example, falsified inventory, plant counts, tags, or sales) intended to deceive a regulator, auditor, or other third party;
  • use the Service to evade taxes, launder money, or violate sanctions or export laws; or
  • continue to use the Service after a required license has been suspended, revoked, or has expired, except to the extent needed to export your records or as permitted by your licensing authority.

The Service provides software only. Nothing in this AUP is legal advice, and complying with this AUP does not mean you are in compliance with cannabis laws.

2. Custom Scripts

Customer Scripts run in a separate, memory- and time-limited script isolate. When writing or running scripts, you must not:

  • Mine cryptocurrency or perform other computation unrelated to managing your business records in the Service;
  • Attack the platform, including attempting to escape, probe, or bypass the script environment; access the underlying host, network, file system, or other customers' data; exploit vulnerabilities; or interfere with the operation of the Service;
  • Scrape or exfiltrate data from the Service or any third-party website, or use scripts to access data you are not authorized to access;
  • send spam, launch denial-of-service attacks, or make unauthorized requests to third-party systems;
  • deliberately consume excessive resources, for example through infinite loops, recursive event triggers, or high-volume automated calls designed to degrade performance;
  • distribute malware, or include code designed to damage, disable, or gain unauthorized access to any system; or
  • use scripts to circumvent usage limits, billing, access controls, or any other restriction in the Service.

We may disable, throttle, or suspend any script that violates this section or threatens the Service, as described in the Terms.

3. Security and Integrity of the Service

You must not:

  • attempt to gain unauthorized access to the Service, other accounts, or related systems or networks;
  • probe, scan, or test the vulnerability of the Service without our prior written permission, except as permitted by our responsible disclosure guidelines on the Security page;
  • interfere with or disrupt the Service, including through excessive automated requests, bots, or crawlers not provided or approved by us;
  • share account credentials, or let anyone access the Service who is not an authorized User; or
  • reverse engineer the Service or use it to build a competing product, except as permitted by law.

4. Content and Data

You must not upload, store, or transmit through the Service any content that:

  • you do not have the right to submit;
  • infringes intellectual property, privacy, or other rights of others;
  • contains personal information collected or processed in violation of applicable privacy law;
  • is unlawful, harassing, threatening, or fraudulent; or
  • contains payment card numbers, government identification numbers, health information, or other sensitive data in fields not designed for that purpose, unless we have agreed in writing.

5. Reporting Violations

If you become aware of a violation of this AUP, please report it to [CONTACT EMAIL].

6. Enforcement

If we reasonably believe you have violated this AUP, we may, at our discretion and with or without notice depending on the severity: warn you; disable or remove the offending Customer Script or content; suspend specific features; suspend or terminate your account; and report illegal activity to appropriate authorities where required by law. We may also cooperate with law enforcement or regulators in response to valid legal process.

7. Changes

We may update this AUP from time to time. We will post the updated version here with a new effective date and notify customers of material changes as described in our Terms of Service.

8. Contact

[COMPANY LEGAL NAME], [BUSINESS ADDRESS], [CONTACT EMAIL]